Senior Information Security Engineer

Senior Information Security Engineer role with a focus on securing Windows-based environments and delivering security solutions for customers.

Responsibilities

• Design, implement, and manage Group Policy Objects (GPOs) to enforce security configurations and organizational standards
• Configure, administer, and harden Windows Server and Windows workstation systems as part of security solution deployments
• Implement and maintain Active Directory security configurations, including user and group management, OU structures, and policy enforcement
• Design and implement role-based access control (RBAC) and least-privilege access models
• Deploy, configure, and manage endpoint protection and antivirus solutions
• Apply system hardening practices aligned with industry security frameworks and best practices
• Perform security assessments of Windows environments and implement remediation actions
• Support creation of secure configurations, patch processes, and compliance with security policies
• Document system configurations, security controls, and deployment procedures for customer environments
• Provide technical guidance and knowledge transfer to customer stakeholders when appropriate

Requirements

• Bachelor’s degree in Information Security, Computer Science, Information Technology, or a related field (or equivalent experience)
• 8+ years of experience administering and securing Microsoft Windows environments
• Strong hands-on experience with Active Directory administration
• Proven experience creating and managing GPOs
• Experience implementing RBAC and identity management practices
• Hands-on experience deploying or managing endpoint protection / antivirus platforms
• Solid understanding of Windows security architecture and system hardening techniques
• Experience performing security assessments and remediation

Desired Tool Experience

• Microsoft Hyper-V Virtualization
• Splunk
• PDQ
• RSA Authentication Manager

Preferred Qualifications

• Experience with Ansible or PowerShell scripting and automation
• Familiarity with security monitoring tools and SIEM platforms
• Knowledge of security frameworks such as NIST, CIS Benchmarks, or ISO 27001
• Experience supporting enterprise or multi-tenant environments
• Experience with protecting data at rest
• Experience with stakeholder management
• Current DoD clearance preferred
• Experience with JIRA is preferred
• Relevant certifications: CompTIA Security+, CISSP, Microsoft security or identity certifications, GIAC

Technologies

• Microsoft Windows
• Active Directory
• Group Policy Objects (GPOs)
• Group Policy management
• Role-based access control (RBAC)
• Endpoint protection
• Antivirus
• Microsoft Hyper-V Virtualization
• Splunk
• PDQ
• RSA Authentication Manager
• PowerShell
• Ansible
• SIEM
• NIST
• CIS Benchmarks
• ISO 27001
• JIRA
• CompTIA Security+
• CISSP
• GIAC

Location and Travel

• De Witt, NY (onsite)
• Travel up to 30% may be required

Salary

• USD 101,600 - 132,000 per year

Benefits

• Medical, vision, and dental insurance for employees and dependents
• Generous paid time off, including 8 designated holidays
• 401(k) with employer contributions
• Tuition assistance and student loan assistance
• Wellness and employee assistance resources
• Employee stock purchase opportunities
• Short-term and long-term disability coverage

Citizenship and Security Requirements

• Must be a U.S. citizen
• Applicants selected may be subject to a government security investigation and must meet eligibility requirements for access to classified information

Drug-Free Workplace

• Saab is a federal government contractor and adheres to policies and programs necessary for sustaining drug-free workplaces
• Condition of employment includes passing a pre-employment drug screen